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WHAT IS CLAIMED IS: 

1. Method of intercepting a voice/multimedia communication in a virtual 
private network, the method comprising: 

setting up the voice/multimedia communication in the virtual private 
network, the communication composed of a plurality of data packets and signaling 
information; 

extracting an identifying information for the voice/multimedia 
communication from the signaling information; 

determining whether at least one participant in the voice/multimedia 
communication matches an intercept subject; 

duplicating the plurality of data packets and the signaling information if it 
is determined that there is a match; and 

re-originating the plurality of data packets and the signaling information in 
the virtual private network. 

2. The method according to claim 1, further comprising encapsulating the 
data packets and storing the data packets in a database if there is a match. 

3. The method according to claim 1, further comprising transporting the 
duplicated data packets to a law enforcement agency if there is a match. 
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1 4. The method according to claim 1, wherein the step of determining 

2 includes comparing an image/picture from the voice/multimedia communication with an 

3 image/picture of the intercept subject. 

1 5. The method according to claim 4, wherein the step of determining is 

2 performed only until one or more predefined criteria are satisfied if there is no match 

3 between the image/picture from the voice/multimedia communication and the 

4 image/picture of the intercept subject. 

1 6. The method according to claim 1, wherein the step of determining is 

2 performed for substantially all voice/multimedia communications occurring in the virtual 

3 private network if only an image/picture of the intercept subject is available. 



1 7. The method according to claim 1, wherein the step of determining is 

2 performed only when the identifying information extracted from the signaling 

3 information matches an identifying information for the intercept subject. 

1 8. The method according to claim 9, further comprising collecting and 

2 storing the identifying information of the intercept subject if the step of determining 

3 results in a match. 
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1 9. A virtual private network capable of intercepting a voice/multimedia 

2 communication composed of a plurality of data packets and signaling information being 

3 routed therethrough, the virtual private network comprising: 

4 a call control entity configured to set up the voice/multimedia 

5 communication in the virtual private network and to extract an identifying information 

6 from the signaling information; and 

7 a call intercepting server configured to determine whether at least one 

8 participant in the voice/multimedia communication matches an intercept subject and to 

9 duplicate the plurality of data packets and the signaling information if there is a match; 

10 wherein the call control entity is further configured to re-originate the plurality of data 

1 1 packets and the signaling information in the virtual private network. 

1 10. The virtual private network according to claim 9, wherein the 

2 voice/multimedia communication complies with one or more predefined signaling 

3 protocols, including a Voice Over IP (VoIP) protocol. 

1 11. The virtual private network according to claim 9, wherein the signaling 

2 information complies with one or more predefined signaling protocols, including a 

3 Sessions Initiation Protocol (SIP) and a H.323 protocol. 
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1 12. The virtual private network according to claim 9, wherein format of the 

2 data packets complies with one or more predefined routing protocols, including a 

3 Real-time Transport Protocol (RTP). 

1 13. The virtual private network according to claim 9, wherein the call 

2 intercepting server is a stand-alone server that is separate from the call control entity. 

1 14. The virtual private network according to claim 9, wherein the call 

2 intercepting server is a functional feature within the call control entity. 

1 15. The virtual private network according to claim 9, further comprising an 



2 access network including a plurality of access routers and a backbone network including 

3 a plurality of backbone routers, and the call control entity and the call intercepting server 

4 are connected to the access network and the backbone network. 

1 16. The virtual private network according to claim 9, further comprising a 

2 virtual private network administrator configured to receive legal authorization for 

3 intercepting the/multimedia communication and to instruct the call control entity and the 

4 call intercepting server to carry out the interception. 

1 17. The virtual private network according to claim 9, further comprising a database 

2 for storing the identifying information of the intercept subject if there is a match. 
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1 18. The virtual private network according to claim 9, wherein the call 

2 intercepting server determines if there is a match by comparing an image/picture from the 

3 voice/multimedia communication with an image/picture of the intercept subject. 

1 19. The virtual private network according to claim 18, wherein the call 

2 intercepting server performs the determination only until one or more predefined criteria 

3 are satisfied if there is no match between the image/picture from the voice/multimedia 

4 communication and the image/picture of the intercept subject. 

1 20. The virtual private network according to claim 9, wherein the call 

2 intercepting server performs the determination for substantially all voice/multimedia 

3 communications occurring in the virtual private network if only an image/picture of the 

4 intercept subject is available. 

1 21. The virtual private network according to claim 9, wherein the call 

2 intercepting server performs the determination only when the identifying information 

3 extracted from the signaling information matches an identifying information for the 

4 intercept subject. 



26 

HOUSTON 299337v3 61 922-00003 USPT 



